Privacy Policy

StoryLand ("we", "us", "our") operates the StoryLand mobile application. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our app. We comply with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the California Privacy Rights Act (CPRA). By using StoryLand, you consent to the practices described in this policy.

1. Information We Collect

We collect the following categories of information: • Account Information: Anonymous user ID (created automatically), or email address and name if you sign up via Email, Apple, or Google OAuth. • Profile Data: Display name, avatar selection, onboarding status, and app preferences (language, theme, accent color). • Story Content: Topics you enter, story themes, AI-generated text, illustrations, and audio narration. Stories you save or publish to the Discover feed. • Usage Statistics: Number of stories read and created, reading streaks, last active timestamp, and weekly reading counts. • Device Information: Notification preferences, device type, and operating system (collected by Apple/Google for push notifications). • Payment Information: Subscription and purchase records are processed entirely by Apple App Store or Google Play. We do not collect or store credit card numbers or billing addresses.

2. How We Use Your Information

We use your information for the following purposes: • To generate personalized AI stories, illustrations, and audio narration using your chosen topics, themes, and preferences. • To save your stories to your library and enable sharing via the Discover feed. • To track reading progress and provide gamification features (stickers, streaks, achievements). • To send local notifications (daily story reminders and weekly reading summaries) based on your preferences. • To process in-app purchases and manage your subscription status. • To improve our services and fix technical issues. We do NOT use your data for advertising. We do NOT sell your personal information to third parties.

3. AI-Generated Content 🤖

StoryLand uses artificial intelligence to generate stories, images, and audio. Your story topics and preferences are sent to AI services to create content. AI-generated content may be stored on our servers to enable caching and faster loading. We do not use your personal data to train AI models.

4. Third-Party Services

We use the following third-party services to operate StoryLand: • Google Gemini AI — Story text generation, image creation, and text-to-speech. • Together AI — Alternative image generation. • OpenAI — Text-to-speech audio generation. • Google Cloud — Text-to-speech services. • Supabase — User authentication, cloud database, and file storage. • Apple App Store / Google Play — Payment processing for subscriptions and in-app purchases. Each service has its own privacy policy. We recommend reviewing them. We share only the minimum data necessary to provide our services.

5. Children's Privacy 👶

StoryLand is designed for families and children. We comply with the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect personal information from children under 13 without verifiable parental consent. Parents or guardians are responsible for supervising children's use of the app. If you believe a child has provided personal information without parental consent, please contact us at [email protected] and we will promptly delete the data.

6. Data Security 🛡️

We implement appropriate technical and organizational measures to protect your data, including: • HTTPS/TLS encryption for all data in transit. • Secure cloud infrastructure provided by Supabase. • Anonymized user identifiers for non-authenticated users. • Local storage encryption on your device. While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Data Retention 🗄️

We retain your data only as long as necessary to provide our services: • Account data is retained until you delete your account. • Stories and generated content are retained until you delete them or your account. • Usage statistics are stored locally and on our servers for as long as your account exists. • Cached story data may be retained for up to 90 days for performance optimization. You can request deletion of your account and all associated data at any time by contacting us at [email protected] or through the app settings.

8. Your Rights Under GDPR 🇪🇺

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under the GDPR: • Right of Access — You can request a copy of the personal data we hold about you. • Right to Rectification — You can request correction of inaccurate personal data. • Right to Erasure — You can request deletion of your personal data ("right to be forgotten"). • Right to Data Portability — You can request your data in a structured, machine-readable format. • Right to Object — You can object to the processing of your personal data. • Right to Restrict Processing — You can request that we limit how we use your data. • Right to Withdraw Consent — You can withdraw consent at any time where processing is based on consent. To exercise these rights, contact us at [email protected]. We will respond within 30 days. Our legal basis for processing is consent (for optional features and notifications), contract performance (for service delivery), and legitimate interest (for service improvement).

9. Your Rights Under CCPA/CPRA 🇺🇸

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA): • Right to Know — You can request what personal information we collect, use, and disclose. • Right to Delete — You can request deletion of your personal information. • Right to Correct — You can request correction of inaccurate personal information. • Right to Opt-Out of Sale — We do NOT sell your personal information. No opt-out is necessary. • Right to Limit Use of Sensitive Data — You can limit how we use sensitive personal information. • Right to Non-Discrimination — We will not discriminate against you for exercising your rights. To submit a request, email [email protected]. We will verify your identity and respond within 45 days. In the past 12 months, we have not sold any personal information to third parties.

10. International Data Transfers 🌍

Your data may be transferred to and processed in countries outside your country of residence, including the United States, where our service providers operate. For transfers from the EEA/UK, we rely on Standard Contractual Clauses and adequacy decisions approved by the European Commission to ensure your data is adequately protected.

11. Contact Us 📧

If you have questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how your data is handled, please contact us: Email: [email protected] For GDPR inquiries, you also have the right to lodge a complaint with your local data protection authority. This policy may be updated from time to time. We will notify you of significant changes through the app.